CVE-2026-89596 forcedeth: fix off-by-one when saving/restoring non-PCI config space

🗓️ 11 Sep 2026 19:44:58Reported by LinuxType

Off-by-one in forcedeth nv_suspend/nv_resume reads/writes one dword past mapped config space.

Reporter	Title	Published	Views	Family All 21
CBLMariner	CVE-2026-89596 affecting package kernel for versions less than 6.6.157.1-1	1 Oct 202604:01	–	cbl_mariner
Circl	CVE-2026-89596	1 Oct 202618:00	–	circl
CVE	CVE-2026-89596	11 Sep 202619:44	–	cve
Debian	[SECURITY] [DSA 6528-1] linux security update	29 Sep 202609:49	–	debian
Debian CVE	CVE-2026-89596	11 Sep 202619:44	–	debiancve
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-89596	12 Sep 202600:00	–	nessus
EUVD	EUVD-2026-76508	11 Sep 202619:44	–	euvd
Microsoft CVE	forcedeth: fix off-by-one when saving/restoring non-PCI config space	13 Sep 202608:02	–	mscve
NVD	CVE-2026-89596	11 Sep 202620:19	–	nvd

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/nvidia/forcedeth.c"
    ],
    "versions": [
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "effd589568b2c4399894a23000286210c60af6d7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "702aa4a44c87026b97b1da5c5ca80e1fa8a9875a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "fc71c6c3d3e3bb17474dcd1162aea6783a452a64",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "c4d5953582463f45e48b14ef9815e5fb636f7e1f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "9379f8527ca60d92715c90b32f1b477de9ec32cb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "0c3f4544ff3873594c8af1b907b4ac4e6d5ce005",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "c4f196bfeedd71e56aba4b63bd8f919edb2f7056",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a1ca86158eee303af5270338695f90bc7ae02b3",
        "lessThan": "9393f1d656a79693e0c123ff7bc7c5c0f708046d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/nvidia/forcedeth.c"
    ],
    "versions": [
      {
        "version": "2.6.27",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.27",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c4f196bfeedd71e56aba4b63bd8f919edb2f7056
git	www.git.kernel.org/stable/c/fc71c6c3d3e3bb17474dcd1162aea6783a452a64
git	www.git.kernel.org/stable/c/9393f1d656a79693e0c123ff7bc7c5c0f708046d
git	www.git.kernel.org/stable/c/c4d5953582463f45e48b14ef9815e5fb636f7e1f
git	www.git.kernel.org/stable/c/effd589568b2c4399894a23000286210c60af6d7
git	www.git.kernel.org/stable/c/9379f8527ca60d92715c90b32f1b477de9ec32cb
git	www.git.kernel.org/stable/c/0c3f4544ff3873594c8af1b907b4ac4e6d5ce005
git	www.git.kernel.org/stable/c/702aa4a44c87026b97b1da5c5ca80e1fa8a9875a

14 Sep 2026 12:01Current

CVSS 3.17.1

EPSS0.00185